Delta

Purpose

This document serves as a guide to the Delta view, offering insights into its functionalities, capabilities, and the visualization and data flow across different views.

Introduction

As a pivotal component in assessing the organization's cybersecurity posture, risk remediation, and exposure over time, the Delta view guide provides a holistic understanding of its functionalities, visualizations, and data interconnections within visible views. Delta shows you the change during a set time period such as how many findings remained unchanged, added or removed during set time. In the stair-step slide menu on the left hand side you can select specific Assets that you want to show the delta for.

Delta View

To access the Delta view, navigate to Findings > Delta.

Layout

The Delta view is divided into four main parts. Solutions bar, date selection with optional filter by configuration or workflow, bar chart and vulnerabilities table.

Solutions bar

This top section shows:

Total number of solutions available for the data on screen
Watched - count of watched vulnerabilities
Fixed - count of fixed vulnerabilities
Accepted - count of accepted vulnerabilities
False Positives - count of vulnerabilities marked as false positives

On the right side, you will see:

Vulnerabilities count - Shows how many vulnerabilities are currently visible in the table, including any increase or decrease.
Assets affected - Shows how many assets are impacted. Only added assets are counted, removed ones are not.

The tiles for Watched, Fixed, Accepted, and False Positives are clickable. Clicking a tile filters the vulnerabilities table and updates all related metrics on screen.

Solutions bar chart

Below the bar, a chart shows all solutions grouped by type, ordered by count and representing first level of drill-down.

Click a bar solution type bar to see the specific solutions. Click a solution to filter by it. Any interaction in this chart filters all visible data in the vulnerabilities table and metrics. Likewise, filters applied in the vulnerabilities table also affect the displayed metrics and stats.

Period, workflow and configuration filter

Period is required and can be set to any date range. By default, it shows data from today going one year back.

You can also filter by configuration or workflow (optional). These filters help narrow the results to a specific subset of vulnerabilities found using these configurations.

Delta Visualization

The delta visualization incorporates a horizontal bar chart with three categories:

Unchanged: Represents the number of findings that haven't changed within the selected time period.
Added: Indicates the number of findings present at the last selected date.
Removed: Represents the number of findings present at the first selected date.

The chart is fully interactive and will apply filter to the whole view and update any visible counters and stats.

Vulnerabilities Table

For a detailed understanding of how the Vulnerabilities view operates, refer to Vulnerabilities for an overview.

Reference

Vulnerabilities